breach_search
Search breach databases for email, domain, phone, or IP. Auto-enriched with Hudson Rock stealer logs, LeakIX, and Gmail OSINT
breach_whois
WHOIS registration data — registrant, registrar, nameservers, dates
breach_reverse_whois
Find every domain registered by a specific email, name, company, or phone
breach_caller_id
Phone number → registered name and linked social accounts
breach_gmail_osint
Gmail profile intelligence — display name, photo, recovery email/phone
breach_full_profile
Runs all relevant breach tools in parallel for a single target
twitter_user
Profile metadata — followers, following, tweet count, verified status, creation date
twitter_tweets
Fetch up to 100 recent tweets with engagement metrics
twitter_search
Advanced search with full Twitter operators: from:, to:, lang:, min_faves:, etc.
twitter_replies
Reply tree for any tweet — map reaction and amplification networks
twitter_investigate
Full cached investigation: profile + followers + tweets in one call
twitter_event
Event investigation from a tweet URL — seed tweet, replies, quotes, retweets
twitter_full_profile
All of the above in parallel — complete account dossier
social_search
Search Twitter, Reddit, YouTube, TikTok, and Telegram simultaneously
social_stream
Pull the latest events from active real-time monitors
social_analyze
Hashtag co-occurrence network, top influencers, narrative clusters with NWS (Narrative Weaponization Score)
social_intelligence
Full ML pass: CIB bot detection, IOC extraction, geo-inference, velocity surge detection
social_actor_profile
Behavioral profiling: cadence CV (bot indicator), peak hours, platform distribution
social_stix_export
Generate a STIX 2.1 bundle (indicators, threat actors, notes) for Splunk / Sentinel / OpenCTI
social_investigate
Chains search → intelligence + actor profile automatically